Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/DqOt8wEXykCidMPxhG3VY7yds7Q.roa
File:                     DqOt8wEXykCidMPxhG3VY7yds7Q.roa (raw, json)
Hash identifier:          oIieJHSAaK35XnAA0oeQMCbITp5ecJKidaFSfoq6ywI=
Subject key identifier:   0E:A3:AD:F3:01:17:CA:40:A2:74:C3:F1:84:6D:D5:63:BC:9D:B3:B4
Certificate issuer:       /CN=234b54b119a7b3eff153085b7315507cd8513a0f
Certificate serial:       804D
Authority key identifier: 23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/DqOt8wEXykCidMPxhG3VY7yds7Q.roa
Signing time:             Fri 01 Jul 2022 18:34:25 +0000
ROA not before:           Fri 01 Jul 2022 18:34:25 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     202265
IP address blocks:        45.87.161.0/24 maxlen: 24
                          45.87.160.0/24 maxlen: 24
                          2a04:5b81:1fff::/48 maxlen: 48
                          2a04:5b80:53::/48 maxlen: 48
                          2a04:5b84:1::/48 maxlen: 48
                          2a04:5b81:1000::/40 maxlen: 40
                          2a04:5b82::/44 maxlen: 44
                          2a04:5b81:2010::/44 maxlen: 48
                          2a04:5b82:8::/48 maxlen: 48
                          2a04:5b87:1::/48 maxlen: 48
                          2a04:5b80:200::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 32845 (0x804d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=234b54b119a7b3eff153085b7315507cd8513a0f
        Validity
            Not Before: Jul  1 18:34:25 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0ea3adf30117ca40a274c3f1846dd563bc9db3b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:24:1d:64:dc:5d:4c:4e:d9:d1:5f:40:9c:83:
                    e8:e5:d2:97:13:ee:59:45:a1:2b:7f:f9:12:c0:c6:
                    d5:50:9a:a0:60:a4:da:90:88:af:59:65:d8:cb:f0:
                    3d:72:03:69:8b:2a:c5:e1:e8:cf:a1:cd:d7:68:43:
                    8f:1d:78:e8:9a:c4:b8:47:7f:43:4e:75:41:e3:0c:
                    d5:07:b7:df:59:2e:e3:31:4d:4c:50:91:c6:f1:ac:
                    46:ef:30:88:1a:fa:70:52:93:a3:bc:42:a3:84:2c:
                    06:fc:44:0a:dc:36:13:70:33:13:3b:82:51:0e:5a:
                    c6:b1:b2:cf:40:c9:c6:aa:ef:07:79:7e:32:f3:75:
                    5b:fa:ae:fc:de:52:b3:42:75:82:8f:9d:0d:69:7d:
                    2c:50:4c:ab:b3:25:6b:fd:a1:8f:0d:e6:f3:a3:04:
                    11:cb:cf:d0:15:a0:db:f0:30:0a:71:3b:65:f8:4c:
                    d6:04:e4:e6:48:d1:28:3a:cc:0d:6e:71:d9:e0:b4:
                    ae:cd:42:1f:ac:93:85:53:67:90:1e:86:21:18:39:
                    54:76:7f:3c:22:b8:e0:97:83:d7:89:15:66:ec:26:
                    28:82:8f:9a:2f:80:a5:fb:f6:59:47:19:7e:70:ec:
                    06:89:b9:82:1a:9f:e1:f6:b5:31:47:8e:b7:e6:37:
                    7d:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:A3:AD:F3:01:17:CA:40:A2:74:C3:F1:84:6D:D5:63:BC:9D:B3:B4
            X509v3 Authority Key Identifier:
                keyid:23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/DqOt8wEXykCidMPxhG3VY7yds7Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.87.160.0/23
                IPv6:
                  2a04:5b80:53::/48
                  2a04:5b80:200::/48
                  2a04:5b81:1000::/40
                  2a04:5b81:1fff::/48
                  2a04:5b81:2010::/44
                  2a04:5b82::/44
                  2a04:5b84:1::/48
                  2a04:5b87:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         05:4a:2f:58:d3:08:b7:06:2c:74:3b:f0:35:5f:ee:12:f8:16:
         61:b3:60:35:87:bf:6f:a8:f5:dd:64:90:1a:75:d3:03:a6:47:
         48:95:87:6f:31:96:bf:ef:b2:7f:ab:2b:18:e7:a5:4b:45:ac:
         f3:1f:40:94:17:f3:92:8d:1a:0e:50:5c:5f:36:76:47:00:5f:
         59:51:79:c2:0d:a5:2a:e0:40:b3:9b:b3:88:cd:13:e3:0b:26:
         f4:ed:91:ab:49:a1:6e:dd:ab:78:36:28:24:53:ee:dc:b6:27:
         d8:94:51:c6:5c:59:ee:54:f1:82:6e:10:d5:c1:05:57:10:34:
         d0:ee:38:32:77:8c:9a:d2:61:57:bb:81:67:40:c7:37:ea:cf:
         5c:d0:2e:f7:7e:f3:61:70:ca:f6:0f:8c:f1:57:90:8c:a5:20:
         6f:d4:57:84:b6:d8:bc:06:5d:a7:8a:4a:8d:e7:72:3a:53:29:
         c2:d8:c5:51:7d:23:a6:15:1d:ed:30:27:44:a0:2f:f3:b1:70:
         f2:fe:fe:28:8e:ee:9e:2a:3d:12:3c:f0:5b:f6:71:d3:40:0a:
         de:3c:0c:17:c7:24:e6:70:7f:64:c7:50:e7:3a:e0:27:53:48:
         3c:f7:11:cb:f2:c5:c4:9c:75:0e:6f:1e:81:be:ae:fd:8e:df:
         f6:42:e8:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----